Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-33810 (GCVE-0-2026-33810)
Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-06-30 12:06
VLAI
EPSS
Title
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Summary
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Severity
7.5 (High)
8.8 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
39 references
Impacted products
90 products
Credits
Riyas from Saintgits College of Engineering
k1rnt
@1seal
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-33810",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-13T17:48:57.879958Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-13T18:20:37.411Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-04-20T17:23:21.823Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1",
"cpe:/a:redhat:openstack:17.1::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
],
"defaultStatus": "affected",
"product": "HawtIO HawtIO 4.4.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.5.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"product": "OpenShift Compliance Operator 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_builds:1.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Builds 1.6.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.28::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces 3.28",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "unaffected",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "unaffected",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "unaffected",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "unaffected",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "unaffected",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-08T01:06:56.546Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1289",
"description": "Improper Validation of Unsafe Equivalence in Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T12:06:19.285Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"name": "RHBZ#2456335",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19144"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25089"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26571"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22485"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21772"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24478"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22960"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22958"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22962"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22959"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22961"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:14391: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.4"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:26571: OpenShift Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:7291: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1"
},
{
"lang": "en",
"value": "RHSA-2026:10155: Red Hat OpenShift Builds 1.6.5"
},
{
"lang": "en",
"value": "RHSA-2026:10158: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:22960: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:22958: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:22962: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:22959: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:22961: Red Hat Web Terminal 1.15"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-08T02:01:09.100Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-08T01:06:56.546Z",
"value": "Made public."
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "newDNSConstraints"
},
{
"name": "dnsConstraints.query"
},
{
"name": "Certificate.Verify"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.26.2",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Riyas from Saintgits College of Engineering"
},
{
"lang": "en",
"value": "k1rnt"
},
{
"lang": "en",
"value": "@1seal"
}
],
"descriptions": [
{
"lang": "en",
"value": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-295: Improper Certificate Validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T01:06:56.546Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/763763"
},
{
"url": "https://go.dev/issue/78332"
},
{
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-33810",
"datePublished": "2026-04-08T01:06:56.546Z",
"dateReserved": "2026-03-23T20:35:32.814Z",
"dateUpdated": "2026-06-30T12:06:19.285Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-33810",
"date": "2026-06-30",
"epss": "0.0034",
"percentile": "0.25843"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-33810\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-04-08T02:16:03.950\",\"lastModified\":\"2026-06-30T13:18:01.620\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"newDNSConstraints\"},{\"name\":\"dnsConstraints.query\"},{\"name\":\"Certificate.Verify\"}],\"versions\":[{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\",\"cpe:/a:redhat:openstack:17.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"HawtIO HawtIO 4.4.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Compliance Operator 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.6.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.28\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.28::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":5.3}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-13T17:48:57.879958Z\",\"id\":\"CVE-2026-33810\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1289\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.2\",\"matchCriteriaId\":\"39FE9BAF-55E9-43AA-B14E-239E7EF1D65D\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/763763\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78332\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4866\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/19/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/20/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10158\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19144\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21772\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22485\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22862\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22958\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22959\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22960\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22961\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22962\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24478\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25089\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26571\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7291\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2456335\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/19/4\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-04-19T22:08:53.727Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33810\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-13T17:48:57.879958Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-13T17:48:52.707Z\"}}], \"cna\": {\"title\": \"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Riyas from Saintgits College of Engineering\"}, {\"lang\": \"en\", \"value\": \"k1rnt\"}, {\"lang\": \"en\", \"value\": \"@1seal\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.2\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"newDNSConstraints\"}, {\"name\": \"dnsConstraints.query\"}, {\"name\": \"Certificate.Verify\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/763763\"}, {\"url\": \"https://go.dev/issue/78332\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4866\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-295: Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-04-08T01:06:56.546Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-33810\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-19T22:08:53.727Z\", \"dateReserved\": \"2026-03-23T20:35:32.814Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-04-08T01:06:56.546Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
cleanstart-2026-yh23797
Vulnerability from cleanstart
Published
2026-05-21 08:09
Modified
2026-05-21 06:07
Summary
Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1
Details
Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
{
"affected": [
{
"package": {
"ecosystem": "CleanStart",
"name": "cass-operator-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.30.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [],
"database_specific": {},
"details": "Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details.",
"id": "CLEANSTART-2026-YH23797",
"modified": "2026-05-21T06:07:06Z",
"published": "2026-05-21T08:09:55.400366Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YH23797.json"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39883"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42501"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-9h8m-3fm2-qjrq"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-hfvc-g4fc-pqhx"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-mh2q-q3fh-2475"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
}
],
"related": [],
"schema_version": "1.7.3",
"summary": "Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1",
"upstream": [
"CVE-2026-24051",
"CVE-2026-27143",
"CVE-2026-27144",
"CVE-2026-29181",
"CVE-2026-32280",
"CVE-2026-32281",
"CVE-2026-32282",
"CVE-2026-32283",
"CVE-2026-32289",
"CVE-2026-33186",
"CVE-2026-33810",
"CVE-2026-33811",
"CVE-2026-33814",
"CVE-2026-39817",
"CVE-2026-39819",
"CVE-2026-39820",
"CVE-2026-39823",
"CVE-2026-39825",
"CVE-2026-39826",
"CVE-2026-39836",
"CVE-2026-39883",
"CVE-2026-42499",
"CVE-2026-42501",
"ghsa-9h8m-3fm2-qjrq",
"ghsa-hfvc-g4fc-pqhx",
"ghsa-mh2q-q3fh-2475",
"ghsa-p77j-4mvh-x3m3"
]
}
cleanstart-2026-yv44838
Vulnerability from cleanstart
Published
2026-05-18 13:53
Modified
2026-05-02 08:43
Summary
Security fixes for CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-35469, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9jj7-4m8r-rfcm, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-xmrv-pmrh-hhx2 applied in versions: 2.11.913-r0, 2.11.913-r1, 2.8.6-r0
Details
Multiple security vulnerabilities affect the jitsucom-bulker package. These issues are resolved in later releases. See references for individual vulnerability details.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "CleanStart",
"name": "jitsucom-bulker"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.8.6-r0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [],
"database_specific": {},
"details": "Multiple security vulnerabilities affect the jitsucom-bulker package. These issues are resolved in later releases. See references for individual vulnerability details.",
"id": "CLEANSTART-2026-YV44838",
"modified": "2026-05-02T08:43:09Z",
"published": "2026-05-18T13:53:14.836141Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YV44838.json"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-68121"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-25679"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-26958"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27139"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27142"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33815"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33816"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-34986"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39883"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-78h2-9frx-2jm8"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-9jj7-4m8r-rfcm"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-hfvc-g4fc-pqhx"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-pc3f-x583-g7j2"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-xmrv-pmrh-hhx2"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26958"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
}
],
"related": [],
"schema_version": "1.7.3",
"summary": "Security fixes for CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-35469, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9jj7-4m8r-rfcm, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-xmrv-pmrh-hhx2 applied in versions: 2.11.913-r0, 2.11.913-r1, 2.8.6-r0",
"upstream": [
"CVE-2025-68121",
"CVE-2026-24051",
"CVE-2026-25679",
"CVE-2026-26958",
"CVE-2026-27139",
"CVE-2026-27142",
"CVE-2026-27143",
"CVE-2026-27144",
"CVE-2026-32280",
"CVE-2026-32281",
"CVE-2026-32282",
"CVE-2026-32283",
"CVE-2026-32289",
"CVE-2026-33186",
"CVE-2026-33810",
"CVE-2026-33815",
"CVE-2026-33816",
"CVE-2026-34986",
"CVE-2026-35469",
"CVE-2026-39883",
"ghsa-78h2-9frx-2jm8",
"ghsa-9jj7-4m8r-rfcm",
"ghsa-f6x5-jh6r-wrfv",
"ghsa-hfvc-g4fc-pqhx",
"ghsa-j5w8-q4qc-rx2x",
"ghsa-pc3f-x583-g7j2",
"ghsa-xmrv-pmrh-hhx2"
]
}
cleanstart-2026-yy48565
Vulnerability from cleanstart
Published
2026-06-08 12:35
Modified
2026-06-05 11:34
Summary
Security fixes for CVE-2025-15558, CVE-2026-24051, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46597, CVE-2026-46598, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 1.28.5-r0, 1.28.5-r1, 1.28.5-r2, 1.28.5-r3, 1.28.5-r4
Details
Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "CleanStart",
"name": "istio"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.28.5-r4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [],
"database_specific": {},
"details": "Multiple security vulnerabilities affect the istio package. These issues are resolved in later releases. See references for individual vulnerability details.",
"id": "CLEANSTART-2026-YY48565",
"modified": "2026-06-05T11:34:23Z",
"published": "2026-06-08T12:35:24.847984Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YY48565.json"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-15558"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27140"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27145"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32288"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-34986"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39821"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39824"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39827"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39828"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39829"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39830"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39831"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39832"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39833"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39834"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39835"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39883"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42501"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42502"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42504"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42506"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42507"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42508"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-46597"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-46598"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-78h2-9frx-2jm8"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-9h8m-3fm2-qjrq"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-hfvc-g4fc-pqhx"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-mh2q-q3fh-2475"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-p436-gjf2-799p"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-pc3f-x583-g7j2"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15558"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24051"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27140"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32288"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39824"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39827"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39834"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46598"
}
],
"related": [],
"schema_version": "1.7.3",
"summary": "Security fixes for CVE-2025-15558, CVE-2026-24051, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46597, CVE-2026-46598, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 1.28.5-r0, 1.28.5-r1, 1.28.5-r2, 1.28.5-r3, 1.28.5-r4",
"upstream": [
"CVE-2025-15558",
"CVE-2026-24051",
"CVE-2026-27140",
"CVE-2026-27143",
"CVE-2026-27144",
"CVE-2026-27145",
"CVE-2026-29181",
"CVE-2026-32280",
"CVE-2026-32281",
"CVE-2026-32282",
"CVE-2026-32283",
"CVE-2026-32288",
"CVE-2026-32289",
"CVE-2026-33186",
"CVE-2026-33810",
"CVE-2026-33811",
"CVE-2026-33814",
"CVE-2026-34986",
"CVE-2026-35469",
"CVE-2026-39817",
"CVE-2026-39819",
"CVE-2026-39820",
"CVE-2026-39821",
"CVE-2026-39823",
"CVE-2026-39824",
"CVE-2026-39825",
"CVE-2026-39826",
"CVE-2026-39827",
"CVE-2026-39828",
"CVE-2026-39829",
"CVE-2026-39830",
"CVE-2026-39831",
"CVE-2026-39832",
"CVE-2026-39833",
"CVE-2026-39834",
"CVE-2026-39835",
"CVE-2026-39836",
"CVE-2026-39883",
"CVE-2026-42499",
"CVE-2026-42501",
"CVE-2026-42502",
"CVE-2026-42504",
"CVE-2026-42506",
"CVE-2026-42507",
"CVE-2026-42508",
"CVE-2026-46597",
"CVE-2026-46598",
"ghsa-78h2-9frx-2jm8",
"ghsa-9h8m-3fm2-qjrq",
"ghsa-hfvc-g4fc-pqhx",
"ghsa-mh2q-q3fh-2475",
"ghsa-p436-gjf2-799p",
"ghsa-p77j-4mvh-x3m3",
"ghsa-pc3f-x583-g7j2"
]
}
cleanstart-2026-yz69292
Vulnerability from cleanstart
Published
2026-05-18 13:02
Modified
2026-05-15 07:42
Summary
Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34040, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-m6hq-p25p-ffr2, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pwhc-rpq9-4c8w applied in versions: 0.6.4-r5, 0.6.4-r6, 0.6.4-r7, 0.6.4-r8, 0.6.4-r9, 0.7.0-r4
Details
Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "CleanStart",
"name": "k8ssandra-client-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.0-r4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [],
"database_specific": {},
"details": "Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details.",
"id": "CLEANSTART-2026-YZ69292",
"modified": "2026-05-15T07:42:55Z",
"published": "2026-05-18T13:02:39.653696Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YZ69292.json"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-58183"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-58185"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-58187"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-58188"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-58189"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61723"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61724"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61725"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61726"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61727"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61728"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61729"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-61730"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2025-68119"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-25679"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27139"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-27142"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-34040"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42501"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-m6hq-p25p-ffr2"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-mh2q-q3fh-2475"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-pc3f-x583-g7j2"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/ghsa-pwhc-rpq9-4c8w"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58185"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58187"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58188"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58189"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61723"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61724"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61725"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61727"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61730"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68119"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34040"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39836"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
}
],
"related": [],
"schema_version": "1.7.3",
"summary": "Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34040, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-m6hq-p25p-ffr2, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pwhc-rpq9-4c8w applied in versions: 0.6.4-r5, 0.6.4-r6, 0.6.4-r7, 0.6.4-r8, 0.6.4-r9, 0.7.0-r4",
"upstream": [
"CVE-2025-58183",
"CVE-2025-58185",
"CVE-2025-58187",
"CVE-2025-58188",
"CVE-2025-58189",
"CVE-2025-61723",
"CVE-2025-61724",
"CVE-2025-61725",
"CVE-2025-61726",
"CVE-2025-61727",
"CVE-2025-61728",
"CVE-2025-61729",
"CVE-2025-61730",
"CVE-2025-68119",
"CVE-2026-25679",
"CVE-2026-27139",
"CVE-2026-27142",
"CVE-2026-29181",
"CVE-2026-32280",
"CVE-2026-32281",
"CVE-2026-32282",
"CVE-2026-32283",
"CVE-2026-32289",
"CVE-2026-33810",
"CVE-2026-33811",
"CVE-2026-33814",
"CVE-2026-34040",
"CVE-2026-35469",
"CVE-2026-39817",
"CVE-2026-39819",
"CVE-2026-39820",
"CVE-2026-39823",
"CVE-2026-39825",
"CVE-2026-39826",
"CVE-2026-39836",
"CVE-2026-42499",
"CVE-2026-42501",
"ghsa-f6x5-jh6r-wrfv",
"ghsa-j5w8-q4qc-rx2x",
"ghsa-m6hq-p25p-ffr2",
"ghsa-mh2q-q3fh-2475",
"ghsa-p77j-4mvh-x3m3",
"ghsa-pc3f-x583-g7j2",
"ghsa-pwhc-rpq9-4c8w"
]
}
FKIE_CVE-2026-33810
Vulnerability from fkie_nvd - Published: 2026-04-08 02:16 - Updated: 2026-06-17 10:38
Severity
8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Summary
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
References
| URL | Tags | ||
|---|---|---|---|
| security@golang.org | https://go.dev/cl/763763 | Patch | |
| security@golang.org | https://go.dev/issue/78332 | Issue Tracking | |
| security@golang.org | https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU | Mailing List, Release Notes | |
| security@golang.org | https://pkg.go.dev/vuln/GO-2026-4866 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2026/04/19/4 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2026/04/20/1 |
{
"affected": [
{
"affectedData": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "newDNSConstraints"
},
{
"name": "dnsConstraints.query"
},
{
"name": "Certificate.Verify"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.26.2",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"source": "security@golang.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
"matchCriteriaId": "39FE9BAF-55E9-43AA-B14E-239E7EF1D65D",
"versionEndExcluding": "1.26.2",
"versionStartIncluding": "1.26.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
}
],
"id": "CVE-2026-33810",
"lastModified": "2026-06-17T10:38:08.023",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-33810",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-13T17:48:57.879958Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-04-08T02:16:03.950",
"references": [
{
"source": "security@golang.org",
"tags": [
"Patch"
],
"url": "https://go.dev/cl/763763"
},
{
"source": "security@golang.org",
"tags": [
"Issue Tracking"
],
"url": "https://go.dev/issue/78332"
},
{
"source": "security@golang.org",
"tags": [
"Mailing List",
"Release Notes"
],
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"source": "security@golang.org",
"tags": [
"Vendor Advisory"
],
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
}
],
"sourceIdentifier": "security@golang.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-295"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-FV83-X2XW-2J55
Vulnerability from github – Published: 2026-04-08 03:32 – Updated: 2026-06-30 03:36
VLAI
Details
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2026-33810"
],
"database_specific": {
"cwe_ids": [
"CWE-1289",
"CWE-295"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-04-08T02:16:03Z",
"severity": "HIGH"
},
"details": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.",
"id": "GHSA-fv83-x2xw-2j55",
"modified": "2026-06-30T03:36:13Z",
"published": "2026-04-08T03:32:14Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22962"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:24478"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:25089"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:26571"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"type": "WEB",
"url": "https://go.dev/cl/763763"
},
{
"type": "WEB",
"url": "https://go.dev/issue/78332"
},
{
"type": "WEB",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"type": "WEB",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:14391"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19144"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:21772"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22485"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22958"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22959"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22960"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:22961"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2026-33810
Vulnerability from csaf_microsoft - Published: 2026-04-02 00:00 - Updated: 2026-04-14 14:47Summary
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 21113-17084 | — | ||
| Unresolved product id: 21116-17084 | — |
References
4 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2026/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33810.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509",
"tracking": {
"current_release_date": "2026-04-14T14:47:37.000Z",
"generator": {
"date": "2026-04-15T07:32:45.880Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-33810",
"initial_release_date": "2026-04-02T00:00:00.000Z",
"revision_history": [
{
"date": "2026-04-11T01:10:17.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2026-04-14T14:47:37.000Z",
"legacy_version": "2",
"number": "2",
"summary": "Information published."
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "3.0",
"product": {
"name": "Azure Linux 3.0",
"product_id": "17084"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cazl3 golang 1.25.8-1",
"product": {
"name": "\u003cazl3 golang 1.25.8-1",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "azl3 golang 1.25.8-1",
"product": {
"name": "azl3 golang 1.25.8-1",
"product_id": "21113"
}
},
{
"category": "product_version_range",
"name": "\u003cazl3 golang 1.26.1-1",
"product": {
"name": "\u003cazl3 golang 1.26.1-1",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "azl3 golang 1.26.1-1",
"product": {
"name": "azl3 golang 1.26.1-1",
"product_id": "21116"
}
}
],
"category": "product_name",
"name": "golang"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 golang 1.25.8-1 as a component of Azure Linux 3.0",
"product_id": "17084-2"
},
"product_reference": "2",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 golang 1.25.8-1 as a component of Azure Linux 3.0",
"product_id": "21113-17084"
},
"product_reference": "21113",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003cazl3 golang 1.26.1-1 as a component of Azure Linux 3.0",
"product_id": "17084-1"
},
"product_reference": "1",
"relates_to_product_reference": "17084"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "azl3 golang 1.26.1-1 as a component of Azure Linux 3.0",
"product_id": "21116-17084"
},
"product_reference": "21116",
"relates_to_product_reference": "17084"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33810",
"notes": [
{
"category": "general",
"text": "Go",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"21113-17084",
"21116-17084"
],
"known_affected": [
"17084-2",
"17084-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33810.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-11T01:10:17.000Z",
"details": "1.25.9-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-2"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
},
{
"category": "vendor_fix",
"date": "2026-04-11T01:10:17.000Z",
"details": "1.26.2-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17084-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509"
}
]
}
RHSA-2026:10155
Vulnerability from csaf_redhat - Published: 2026-04-23 13:57 - Updated: 2026-06-30 15:00Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.6.5
Details: Releases of Red Hat OpenShift Builds 1.6.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
9.6 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Threats
Impact
Important
References
32 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:10155 | self |
| https://access.redhat.com/security/cve/CVE-2026-33186 | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://docs.redhat.com/en/documentation/builds_f… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-33186 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2449833 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33186 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33186 | external |
| https://github.com/grpc/grpc-go/security/advisori… | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2450554 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33211 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33211 | external |
| https://github.com/tektoncd/pipeline/commit/10fa5… | external |
| https://github.com/tektoncd/pipeline/commit/31800… | external |
| https://github.com/tektoncd/pipeline/commit/3ca7b… | external |
| https://github.com/tektoncd/pipeline/commit/96138… | external |
| https://github.com/tektoncd/pipeline/commit/b1fee… | external |
| https://github.com/tektoncd/pipeline/commit/cdb4e… | external |
| https://github.com/tektoncd/pipeline/commit/ec775… | external |
| https://github.com/tektoncd/pipeline/security/adv… | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456335 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33810 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33810 | external |
| https://go.dev/cl/763763 | external |
| https://go.dev/issue/78332 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4866 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.6.5",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.6.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10155",
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10155.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5",
"tracking": {
"current_release_date": "2026-06-30T15:00:29+00:00",
"generator": {
"date": "2026-06-30T15:00:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10155",
"initial_release_date": "2026-04-23T13:57:56+00:00",
"revision_history": [
{
"date": "2026-04-23T13:57:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T13:58:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T15:00:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.6.5",
"product": {
"name": "Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Af54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ac6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ac95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ac44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ae1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ac5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ab3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T13:57:56+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
RHSA-2026:10158
Vulnerability from csaf_redhat - Published: 2026-04-23 14:13 - Updated: 2026-06-30 15:03Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.7.2
Details: Releases of Red Hat OpenShift Builds 1.7.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
9.6 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x | — |
Threats
Impact
Important
References
58 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:10158 | self |
| https://access.redhat.com/security/cve/CVE-2025-68121 | external |
| https://access.redhat.com/security/cve/CVE-2026-25679 | external |
| https://access.redhat.com/security/cve/CVE-2026-27137 | external |
| https://access.redhat.com/security/cve/CVE-2026-33186 | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://docs.redhat.com/en/documentation/builds_f… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2025-68121 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2437111 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-68121 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-68121 | external |
| https://go.dev/cl/737700 | external |
| https://go.dev/issue/77217 | external |
| https://groups.google.com/g/golang-announce/c/K09… | external |
| https://pkg.go.dev/vuln/GO-2026-4337 | external |
| https://access.redhat.com/security/cve/CVE-2026-25679 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2445356 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-25679 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-25679 | external |
| https://go.dev/cl/752180 | external |
| https://go.dev/issue/77578 | external |
| https://groups.google.com/g/golang-announce/c/Edh… | external |
| https://pkg.go.dev/vuln/GO-2026-4601 | external |
| https://access.redhat.com/security/cve/CVE-2026-27137 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2445345 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-27137 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-27137 | external |
| https://go.dev/cl/752182 | external |
| https://go.dev/issue/77952 | external |
| https://pkg.go.dev/vuln/GO-2026-4599 | external |
| https://access.redhat.com/security/cve/CVE-2026-33186 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2449833 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33186 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33186 | external |
| https://github.com/grpc/grpc-go/security/advisori… | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2450554 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33211 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33211 | external |
| https://github.com/tektoncd/pipeline/commit/10fa5… | external |
| https://github.com/tektoncd/pipeline/commit/31800… | external |
| https://github.com/tektoncd/pipeline/commit/3ca7b… | external |
| https://github.com/tektoncd/pipeline/commit/96138… | external |
| https://github.com/tektoncd/pipeline/commit/b1fee… | external |
| https://github.com/tektoncd/pipeline/commit/cdb4e… | external |
| https://github.com/tektoncd/pipeline/commit/ec775… | external |
| https://github.com/tektoncd/pipeline/security/adv… | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456335 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33810 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33810 | external |
| https://go.dev/cl/763763 | external |
| https://go.dev/issue/78332 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4866 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.7.2",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.7.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10158",
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.7"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10158.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2",
"tracking": {
"current_release_date": "2026-06-30T15:03:12+00:00",
"generator": {
"date": "2026-06-30T15:03:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:10158",
"initial_release_date": "2026-04-23T14:13:54+00:00",
"revision_history": [
{
"date": "2026-04-23T14:13:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-23T14:14:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T15:03:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.7.3",
"product": {
"name": "Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Af5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937971"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Af2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3Aeb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ab020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Acd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846689"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3Aa4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849396"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776860241"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ab39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851459"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852111"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ab2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846936"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ae593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846493"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64 as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x as a component of Red Hat OpenShift Builds 1.7.3",
"product_id": "Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.7.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:13:54+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.7.1 upgrades to to 1.7.2",
"product_ids": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5008dcb0428a0837b9abd827963e7008c8e16af8cfcbd432421286fca63fe714_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:5856cba3fe26ab7f756ba93e06caa6e522336ff36ff4c515132a8d35c85a2f64_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ddf185f2714d45fab92c831bf32673da55c7a43dbcf1bd22090b203791e03b2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:eb32b129ea6a10b4aada4313ff11b04c33b99877eea9a5e567245d361d69f140_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:165f6085028f3859f6ede9176d413274ee1a457b72cd9c437795146c20b0722c_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:7a39f26f51bcbb4ef395208db01e2b0ee8b1fe9b15b3701c9c35d8f636f790d9_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a4d609ff22b610b625a74fffd22883d5debe93c2e0c6ae2bcbbfd8f5f6b2cf12_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ec02f5f031fefd5a610b69a81be5350f96e54511e2d2c619e8b9fe8f193297b6_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:0070df2a8c7882ae021000c498ead96b19f1bd6819e46657d5898cb71e6ec506_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:4b578a8ef1579d7168b7f0a1b7cebe66213003f8225a86cfdd4c9f24a5e2d871_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8d6371a5fe374e3bc5c19a930ea712d266fab13a722768204b128bc71e928c97_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:985b19d79b3e54fc8b99b9b0239b74dcf6d0102d3ff0cd5363ae4627069d2ee1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2a0a6ea6465a6d165f072ef782a1825cc16ecfb2f8c58d5ec58c1d40d02e5208_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:679b470190ff7a7fc04e283884be4f24d1b0c475d0730fb718f2f45c60551b61_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:9734d0dc0367884e128837b7d02038a3b4136c4865ed3dc90902801393e178b4_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5f35702e424cd4e9b768c59d44928844b2d09fbb98d368ae7b54b7ec0771d13_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:093834bac2e2f7f01968ef542b9bcbf5fbe530c9f0dd86521825797abb4a33a2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:382be8775c61942123adac2acec9f48085ebf7fd2b286c20e36a33ea6462baa7_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5e83175abaef1e3046bac94621a86e036317833c740cdd6d235f1133a1388dd3_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:7173a298b07cbde3cd9ff12ca25f26ccf79b9ff8cfcb35a001c9f8c0b0291436_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:16cf5e33f297c027686d3ba9c6cbb01dba7a39299e2765fe4eaacc892b32f0d1_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:4715242f98234d2018f8317d9a57f63ff23b4d63be96491d55af2a2ef4572261_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:678c8d38900d994c4aa2e23669b7901747028690a4c5e4ba9aced4cbfe22b248_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:b39a2930e310d432a840798f03f7e55b8da42ff16ccda31790f85558d2be2537_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1d01e27a3cdea6c99a985b877e29629d1c1fb00203f4a90c45db6df7a602e2cc_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:88b38ad10068e0574d2e5934849b98429c69305633b42aa4d19822ede2a6e10d_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b020334c46f2d7276ba0c3aa8be7951254b197b2da310f0c22d2e16681a6a265_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:f2c222424cd66659ebea6787b6934c2d01d9eeb4f7db03ebfa16ab7b65aeb5b2_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:153f9e059139e6dbaeb2e5166d21bfeec59a59aa5cd8045e11dbfa091479b4bb_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:b2173caa314ae26d2a300f61cfa94031c34fe7676fd007418849212082db3636_s390x",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:cd9ada6b38c080eec45e1d053ec305dde2d574899019ffb01a28dbe1dd582912_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f17eb032f7250aa4a3bb99e2754fa4cb0dbfc9fbbb8c787f70ad30b71b27b5a2_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1a57b53f8642ccb95884687efc251ad52e8ee3e718b55d0f4d21f800dfd3f5fa_arm64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:6234cfecf4dd75b8c4ff1c527ad4eb306d966cfa0170ecdb8ea4bc69c2cdc495_amd64",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:779e75a94141db7f8223b9861ba2fa3ba8baf6fa470bb0ab109945d75e20121b_ppc64le",
"Red Hat OpenShift Builds 1.7.3:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:e593bebc4e753ac3c4cdd1be05711452dbda6e3b015b37926fa804851bdad6a8_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
RHSA-2026:11330
Vulnerability from csaf_redhat - Published: 2026-04-28 07:16 - Updated: 2026-06-30 15:03Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.6.5
Details: Releases of Red Hat OpenShift Builds 1.6.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
9.6 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 | — |
Threats
Impact
Important
References
32 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:11330 | self |
| https://access.redhat.com/security/cve/CVE-2026-33186 | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | external |
| https://access.redhat.com/security/updates/classi… | external |
| https://docs.redhat.com/en/documentation/builds_f… | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2026-33186 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2449833 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33186 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33186 | external |
| https://github.com/grpc/grpc-go/security/advisori… | external |
| https://access.redhat.com/security/cve/CVE-2026-33211 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2450554 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33211 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33211 | external |
| https://github.com/tektoncd/pipeline/commit/10fa5… | external |
| https://github.com/tektoncd/pipeline/commit/31800… | external |
| https://github.com/tektoncd/pipeline/commit/3ca7b… | external |
| https://github.com/tektoncd/pipeline/commit/96138… | external |
| https://github.com/tektoncd/pipeline/commit/b1fee… | external |
| https://github.com/tektoncd/pipeline/commit/cdb4e… | external |
| https://github.com/tektoncd/pipeline/commit/ec775… | external |
| https://github.com/tektoncd/pipeline/security/adv… | external |
| https://access.redhat.com/security/cve/CVE-2026-33810 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2456335 | external |
| https://www.cve.org/CVERecord?id=CVE-2026-33810 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2026-33810 | external |
| https://go.dev/cl/763763 | external |
| https://go.dev/issue/78332 | external |
| https://groups.google.com/g/golang-announce/c/0uY… | external |
| https://pkg.go.dev/vuln/GO-2026-4866 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.6.5",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.6.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:11330",
"url": "https://access.redhat.com/errata/RHSA-2026:11330"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11330.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5",
"tracking": {
"current_release_date": "2026-06-30T15:03:17+00:00",
"generator": {
"date": "2026-06-30T15:03:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:11330",
"initial_release_date": "2026-04-28T07:16:04+00:00",
"revision_history": [
{
"date": "2026-04-28T07:16:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-28T07:16:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T15:03:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Builds 1.6.5",
"product": {
"name": "Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Builds"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3A60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776937737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Af54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ac6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ac95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Ac44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Ae1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ac5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ae095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3Ab3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776849392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Aa9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776846586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776859898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776852121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776851845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Af4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776847666"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1776848251"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64 as a component of Red Hat OpenShift Builds 1.6.5",
"product_id": "Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64",
"relates_to_product_reference": "Red Hat OpenShift Builds 1.6.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-28T07:16:04+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11330"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-28T07:16:04+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11330"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-28T07:16:04+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.4 upgrades to to 1.6.5",
"product_ids": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11330"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:092c9b4af55870d904beac952acf0fd914a2e784472888bb9f2c108548ff4906_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:25a9ca58f1104d83e0e312baf241f3eb048220c22a0065eed70106d9991faea4_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:2c6b079cf3184539f06634afcb35784ac74110c04fec36dfa80c2b0789d9099d_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:7b579fdc1d1dca3f32c2172eddb899ef3f8ff39d7af5cbed854d48e1d9e27675_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2a33081f6d32826d53821e1aea686e1a6e8cb30fea8e601c00729c06511b98c6_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:31af187e314a843c4c02edd119d5edc2c260baca4d9a4ec2347f80f5511d6d3f_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:355cfa27d099cce3743ffa8432d2070ae3f21a446b560f6c1c5146b7351d116a_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:64d5bfb3e3a9861b3cefdb49c0f9b286aad11ccb31867092de08e48630694f82_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:3d20f5041cd11c838fc15148f60650ae0824b4c7816eb50152a28693443b0cd0_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:596cfba3fdac5cd9ee725f6b9e0bc640eaf7e933d019d9d57ea840592ec72f23_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a22a2cca1f48ee743a15c68ca22d1d76943c25b2069e80a4bc1275c8157284db_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:a9d691eec41e370daff6737ed9d0b8c018b5426ff195b77897fd579846858e39_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:54890d05d56aeee46f051f42959500e00f2c748e9fdb2f1100226d8b4b976a47_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:549f2d54aaa66f9ab68e08f49e4f0cd95ffbbc93607ef7a112b74b177e57cfd0_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:5664f48403387a9e64370337d3ea5eb30ec27336f6e8f47a3a8a3ba0fe96741c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:c95f763b803f53276670cea4fdf289983e472361a00a6d7da0bb56b3e857a935_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:60bfc1aeb95ff74fd2d8bd29700994594c92b93795b63f02fd0d7bb2d3d6fba7_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:26fdde499994a4be0eb277bbbca899061384f20673672ef30ed301d792b3108d_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:5d08c7ee6886747dc077faa7f1e4e696b5ad29cc4dcc8fd2c4f3d7a434f47f9b_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e1cdb58bf2783a9a50346e1690f51b09e175c8ebb737b11332658d85bcb645e9_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c5083edbd43692dc5ef5b0cf14417eea19412c0927ede39a87ade36515cf16f1_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d56042518051b3e4dbef3da9f13d74fd8e8a6b9ad8520965052f1522247b70ef_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d6401dc97f1adeafcfb8a34e3c1fe8230cd2ca6bb7c4245ef875a4b3fa35b014_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:f54ab8388a0f593c2426c240c7d50fd7f3f2263e1c88f7726dbbe2ebbed38896_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:0d629bbf41a55434b40545e12c5f0d95e357b0fd74303feec657918b90321642_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:7d6aecb4a7e98dcabc77c3043e214bec9fa521af9c6a048ece876ba9f294dce8_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d69d7290c5e07301e9397df551e97d8d81795ba7c711d95f60bd178fc39f1434_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e095cffba13badc4aab65f9920f8e618c9fe4411d6d53d8b160716a31fe2d6e7_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:71f49240685245565f35d7d4b6d7d55b442cb61bc7c0f4d25c5529ca9187ae9f_amd64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:78775c452a2c5ddb3568b677c2790815fb2a2d6afacbfacccdaf68b79c8fe39c_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:c44d2ad3d716e7c753ec538654d25c42d80539071f1d5f81df4a8fd5e76c7a58_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:f4752a62de9c94e0f84aaa6cddfeb4a5cbecab6c83147b72b6f05ddef23fe192_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:26f519f9f0e7e41f7f6b12bfd2f968bfb5196f05781493752e17a85d09b0b976_s390x",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:3b1112d42f42c721287e1da5e5a87b6832889ed532b1acae27caeb64f1bb44f9_arm64",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:b3ac0453a1d16b2a9d1314991cd7642d637c5d9af3e884aabd88e4e9b73c59c6_ppc64le",
"Red Hat OpenShift Builds 1.6.5:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:c6491240cf919793d2d0646e7cd505f7c45f18655c600593e06c98324bf0dc71_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…